China’s weapon-snatching tactics

Since 2008, the number of China-related technology investigations has risen significantly, US investigators say

By John Shiffman and Duff Wilson  /  Reuters, OAKLAND, California

Sun, Dec 22, 2013 - Page 9

A gents from the US’ Department of Homeland Security sneaked into a tiny office in Oakland’s Chinatown before sunrise on Dec. 4, 2011. They tread carefully, quickly snapping digital pictures so they could put everything back in place. They did not want Philip Chaohui He (何朝輝), the businessman who rented the space, to learn they had been there.

Seven months had passed since they had launched an undercover operation against a suspected Chinese arms-trafficking network — one of scores operating in support of Beijing’s ambitious military expansion into outer space.

The agents had allowed a Colorado manufacturer to ship He a type of technology that China covets, but cannot replicate: radiation-hardened microchips.

Known as rad-chips, the dime-sized devices are critical for operating satellites, for guiding ballistic missiles and for protecting military hardware from nuclear and solar radiation.

It was a gamble. This was a chance to take down an entire Chinese smuggling ring.

However, if He succeeded in trafficking the rad-chips to China, the devices might someday be turned against US sailors, soldiers or pilots, deployed on satellites providing the battlefield eyes and ears for China’s People’s Liberation Army.

Entering He’s office at 2:30am that December morning, the agents looked inside the FedEx boxes. The microchips were gone. The supervisor on the case, Greg Slavens, recoiled.

“There are a bunch of rad-chips headed to China,” he recalls thinking, “and I’m responsible,” Slavens said.

In the past 20 years, the US has spent trillions of dollars to create and deploy the world’s best military technology.

It also has enacted laws and regulations aimed at keeping that technology away from potential adversaries such as Iran, North Korea and the nation that poses perhaps the most significant long-term threat to US military supremacy, China.

China’s efforts to obtain US technology have tracked its accelerated defense buildup. The Chinese military budget — second only to the US’ — has soared to close to US$200 billion.

Chinese President Xi Jinping (習近平) is championing a renaissance aimed at China’s asserting its dominance in the region and beyond. In recent weeks, Beijing has declared control over air space in the contested East China Sea and launched China’s first rover mission to the moon.

As China rises to challenge the US as a power in the Pacific, US officials say Beijing is penetrating the US defense industry in ways that not only compromise weapons systems, but also enable it to secure some of the best and most dangerous technology.

A classified Pentagon advisory-board report this year, for instance, asserted that Chinese hackers had gained access to plans for two dozen US weapons systems, according to the Washington Post.

Yet the smuggling of technology such as radiation-hardened microchips out of the US may present a more immediate challenge to the US military.

If China hacks into a sensitive blueprint, years might pass before a weapon can be manufactured. Ready-made components and weapons systems can be — and are — used immediately.

Beijing says its efforts to modernize its military are above-board.

“China has mainly relied on itself for research and development and manufacturing,” the Chinese defense ministry said in a statement.

How often the Chinese succeed at acquiring US-made weaponry or components is unclear.

US government officials say they do not know, in part because the problem is too widespread and difficult to track.

By its very definition, black market smuggling is hard to monitor and quantify. Quite often, sensitive US technology is legally shipped to friendly nations and then immediately and illegally reshipped to China.

China also presents a special challenge: It is both the largest destination for legally exported US-made goods outside North America and the most or second-most frequent destination for smuggled US technology.

A 2010 classified Pentagon assessment showed a spike in legal shipments to China of “dual-use” technology — products that have civilian and military purposes, a person involved in the study said.

The technology products the Chinese military seeks tend to be miniaturized, and thus are not easily identifiable to US border agents — unlike drugs, for example. And trafficking in these goods is not technically illegal until someone tries to export them.

“When you think about how many legitimate transactions go to a place like China, it makes it very difficult to track,” said Craig Healy, a senior Homeland Security official who directs the US export enforcement center.

Officially published US estimates of how frequently US arms technology gets smuggled are incomplete.

By one Pentagon calculation, suspicious queries to US defense manufacturers by entities linked to China increased 88 percent from 2011 to last year. The government will not disclose the number of cases that underlie that percentage.

US defense and intelligence officials said that although they closely monitor the Chinese buildup, they believe China remains at least a decade behind the US.

“They still have a long way to go,” one senior US defense official said.

Reuters analyzed court records from 280 arms-smuggling cases brought by the US government from Oct. 1, 2005, to Oct. 1 this year.

Reporters also interviewed two dozen counter-proliferation agents and reviewed hundreds of internal FBI, Department of Homeland Security and Commerce Department documents.

The number of counter-proliferation arrests related to all countries quadrupled from 54 to 226 from 2010 to last year, internal law enforcement records show.

Since 2008, the number of China-related space-technology investigations — like the undercover case against the Oakland man — has increased approximately 75 percent, US law enforcement sources said.

Since late last year, federal agents say they have begun nearly 80 space-and-satellite-related investigations.

“I think we’re getting better at this, but this stuff is rampant,” FBI assistant director for counter-intelligence Robert Anderson Jr said, referring to cases involving all potentially hostile nations, not just China.

“The more you dig in these cases,” he said, “the more potential investigations you find.”

A MAN NAMED ‘HOPE’

US counter-proliferation agents say the 2011 Oakland sting is typical of dozens launched recently against people trying to acquire space and missile technology for China.

It also demonstrates the difficulty in dismantling smuggling networks, even when a target appears patently suspicious from the outset.

The Oakland investigation began in spring 2011. The manufacturer, Aeroflex of Colorado Springs, Colorado, received an e-mail from a man who called himself Philip Hope of Oakland. The man wanted to buy two kinds of rad-chips — 112 of one type and 200 of the other. The total cost: US$549,654.

The initial e-mail triggered suspicion.

People and companies who buy these kinds of rad-chips are usually well-established, repeat customers — more multinational corporation than mom and pop.

Aeroflex salesmen had never heard of “Philip Hope” or his company, “Sierra Electronic Instruments.”

Most suspicious of all, just days after placing the order, Hope sent Aeroflex a certified check for the full amount, US$549,654. That was rare. Buyers were expected to make a deposit, but nobody paid up front.

The suspicious Aeroflex employees contacted the US’ Homeland Security Investigations (HSI), a division of Immigration and Customs Enforcement, which keeps a special counter-proliferation office in the space technology hub of Colorado Springs.

Based on quick record checks, the HSI agents drew a portrait of “Philip Hope.” The man was a Chinese immigrant and legal permanent resident, Philip Chaohui He, an engineer for the state of California assigned to a Bay Bridge renovation project. Sierra Electronic Instruments was a start-up run from the one-room office in Chinatown.

The HSI agents concluded that He was buying the rad-chips on behalf of someone else. Someone rich. Someone who could not legally acquire them. Probably someone in China — likely the China Aerospace Science and Technology Corp, a state-run entity that operates nearly all of China’s military and civilian space projects.

China Aerospace officials did not respond to requests for comment.

The rad-chips He ordered from Aeroflex are not the most powerful on the market, and could not operate a sophisticated military satellite on their own. Yet experts say they have few uses other than as one of the many components of a sophisticated satellite.

“You wouldn’t spend that kind of money on those microchips unless you intended to use them in much bigger satellites,” said Alvar Saenz-Otero, associate director of the Space Systems Lab at the Massachusetts Institute of Technology.

Despite the concerns about where and how the components might be used, He’s order of 312 rad-chips violated no law. These chips may be legally sold domestically, and to foreign buyers who obtain a US State Department license.

They may not be exported outside the US to certain nations, including China. He had the chips sent to his office address in Oakland, making the deal legal. If He tried to take them abroad, he would be breaking the law.

The agents faced the key question that comes in almost every counterproliferation case: Could they lure the suspect into a sting? If so, would it be worth the trouble?

Undercover operations are time-consuming, expensive and risky. If agents dangled rad-chips in front of the suspect and he got away, the components would probably end up on Chinese satellites. If they delivered the chips and watched him closely, he might lead them to a network traceable to Beijing.

COMPLICATIONS

The agents in the case faced another complication: At the time, Aeroflex — the very manufacturer enlisted to help with the sting — was itself under civil investigation for sending rad-chips to China.

Although that investigation was still under way, Aeroflex had already admitted that it sent more than 14,500 rad-chips to China between 2003 and 2008.

Aeroflex exported more than half of those chips even after US officials had directed it to stop doing so.

The company declined to comment. However, documents show two mitigating factors — Aeroflex voluntarily disclosed the transgressions, and it blamed them in part on misreading complex and sometimes competing US Commerce Department and State Department regulations.

Even so, State Department regulators would ultimately conclude: “The exports directly supported Chinese satellites and military aircraft, and caused harm to US national security.”

Thus, if the HSI agents wanted to attempt a sting against the man in Oakland, they would have to trust a company that had admitted aiding a potential enemy on a much larger scale.

On July 28, 2011, a federal agent posing as a Federal Express driver arrived at He’s office building in Oakland. The agent handed He’s wife a package containing the first order, 112 rad-chips. She leaned it against a wall.

The undercover agent wore a hidden camera that recorded the office’s interior. The place had sleeping bags and mattresses on the floor. There was no satellite research equipment.

The agent departed, but not before leaving a tiny surveillance device.

For the next five weeks, the device indicated that the box did not move. Agents also put a camera outside the office door, placed a keystroke-logger on He’s computer and monitored his movements based on his cellphone location. They placed his name on an automated watch list at airports and border crossings.

However, they did not have the manpower to tail him. He slipped out of the country on Sept. 6, 2011, taking a flight to San Diego and driving across the border at Tijuana.

The agents received an automated security alert only the following day, Sept. 7, 2011. They also learned that He was booked on a flight from Tijuana to Shanghai that evening. It was too late. They had missed him.

Was China about to receive 112 military-grade microchips for its space program? There was no way to know for sure.

The agents had two options: Drop the case, or send He the second batch of chips and try to catch him exporting those.

On Oct. 6, 2011, an undercover agent helped FedEx deliver the second shipment, 200 radiation-hardened chips. Once again, the agents waited and watched.

When two months passed with no indication that He had moved the microchips, Slavens sought the sneak-and-peak warrant.

The late night search, on Dec. 4, 2011, turned up empty boxes. Slavens then sought a warrant for He’s home and renewed the airport and border look-outs.

On the morning of Dec. 10, 2011, — before the agents could complete the search warrants — the smuggler surprised them again.

An agent noticed He’s cellphone on the move, far south of Oakland, heading toward Los Angeles — presumably to Tijuana again, and then on to China. Slavens scrambled Homeland Security Investigations agents near Los Angeles.

The LA agents followed the cell-tracker to a Best Western hotel south of the city. In the early evening, they located He’s car in the hotel parking lot. They confirmed that He had checked in, and they settled in for surveillance.

At about 8:45am on Dec. 11, 2011, He left his hotel room with an unidentified traveling companion and pulled his car onto Interstate 110, driving south. Tijuana was two hours away. The HSI agents planned to stop him at the Mexico border.

However, after just 2km, He pulled into the Port of Long Beach. Then, he used a Transportation Safety Administration pass — a badge he carried for his Bay Bridge repair assignment — to swiftly get through port security.

The agents caught up as the vehicle drew near a red and white cargo ship flying a Chinese flag. Stenciled on the mast were the letters ZPMC.

This was the same company with the Bay Bridge repair contract to which He had been assigned by the California transit agency. A coincidence? The agents could not be sure.

HSI agents stopped He and his friend as they approached the ship captain. An agent opened the trunk. Stuffed inside a tub of Similac infant formula, authorities found 200 radiation-hardened Aeroflex microchips.

The agents say the captain told them that he expected to receive “household goods” and other consumer purchases from He for delivery to friends in China. The captain and He’s driving companion were permitted to leave. He was handcuffed.

Under questioning, He told the agents that he had started his Oakland business at the behest of a Shanghai electronics broker who promised to reward him with a condominium in China for his assistance.

MISSING CHIPS

In August, more than five years after Aeroflex admitted wrongdoing, the State Department announced an US$8 million fine for the company’s 2003 to 2008 satellite microchip shipments to China. If Aeroflex completes remedial measures, such as training employees to follow rules the company already should have been following, half of the fine will be suspended.

In September, He pleaded guilty in federal court in Colorado.

Federal guidelines call for a sentence of 46 to 57 months.

In a court filing, his lawyer disputed the government’s assertion that He knew the rad-chips were destined for use by the Chinese government.

Assistant federal defender Robert Pepin said He believed they would be used for commercial mining satellites.

Pepin said He deserves a sentence of no more than 24 months, adding that He faces certain deportation when his sentence concludes, and potential separation from his children, who are US-born citizens.

Despite the scope of the investigation, no one else was charged. The others in the suspected network — the ship captain, the Shanghai broker, the traveling partner and another Oakland suspect — were not arrested.

The fate of the first shipment of 112 radiation-hardened chips — the ones that got away -— is unknown. US officials strongly suspect they are either in China or orbiting the Earth aboard one of Beijing’s satellites.